{
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "git-lfs-0.3.6.1-3.oe2403sp3.aarch64.rpm",
  "spdxVersion": "SPDX-2.2",
  "creationInfo": {
    "created": "2026-09-26T18:00:37.835532725Z",
    "creators": [
      "openeuler_creator"
    ]
  },
  "dataLicense": "CC0-1.0",
  "documentNamespace": "https://sbom.openEuler.org/git-lfs-0.3.6.1-3.oe2403sp3.aarch64.rpm",
  "packages": [
    {
      "SPDXID": "SPDXRef-rpm-git-lfs-3.6.1",
      "name": "git-lfs",
      "licenseConcluded": "MIT and BSD and Apache-2.0 and MPL-2.0",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "e43d9316071578f86f350f7f2864f5572cc2d1af6260e9d9beede1fd94b6653e"
        }
      ],
      "description": "Git Large File Storage (LFS) replaces large files such as audio samples,\nvideos, datasets, and graphics with text pointers inside Git, while\nstoring the file contents on a remote server.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/git-lfs@3.6.1-3.oe2403sp3?arch=aarch64&epoch=0&upstream=git-lfs-3.6.1-3.oe2403sp3.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://git-lfs.github.io/",
      "licenseDeclared": "MIT and BSD and Apache-2.0 and MPL-2.0",
      "sourceInfo": "acquired package info from repodata DB: repodata/ad2eaa73c52e977400394b41f9a1cb471a8e228cfc085843d3ae74b685a9f2de-primary.sqlite.bz2",
      "summary": "Git extension for versioning large files",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:3.6.1-3.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-git-core-2.43.0",
      "name": "git-core",
      "licenseConcluded": "GPLv2+ or LGPLv2.1",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "39608e9755dcbd5fc389dc3d52cb7166713d04737390256a579c125b68488dae"
        }
      ],
      "description": "Git is a fast, scalable, distributed revision control system with an\nunusually rich command set that provides both high-level operations\nand full access to internals.\n\nThe git-core rpm installs really the core tools with minimal\ndependencies. Install git package for common set of tools.\nTo install all git packages, including tools for integrating with\nother SCMs, install the git-all meta-package",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/git-core@2.43.0-11.oe2403sp3?arch=aarch64&epoch=0&upstream=git-2.43.0-11.oe2403sp3.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "https://git-scm.com/",
      "licenseDeclared": "GPLv2+ or LGPLv2.1",
      "sourceInfo": "acquired package info from repodata DB: repodata/ad2eaa73c52e977400394b41f9a1cb471a8e228cfc085843d3ae74b685a9f2de-primary.sqlite.bz2",
      "summary": "Core package of git with minimal functionality",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.43.0-11.oe2403sp3"
    },
    {
      "SPDXID": "SPDXRef-rpm-glibc-2.38",
      "name": "glibc",
      "licenseConcluded": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only",
      "checksums": [
        {
          "algorithm": "SHA256",
          "checksumValue": "ddc32e0b4d9456930df864f399edc41b74031a659bbd0668c3e84ae7f47fba94"
        }
      ],
      "description": "The GNU C Library project provides the core libraries for the GNU system and\nGNU/Linux systems, as well as many other systems that use Linux as the kernel.\nThese libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD,\nOS-specific APIs and more. These APIs include such foundational facilities as\nopen, read, write, malloc, printf, getaddrinfo, dlopen, pthread_create, crypt,\n login, exit and more.",
      "downloadLocation": "NOASSERTION",
      "externalRefs": [
        {
          "referenceCategory": "PACKAGE_MANAGER",
          "referenceLocator": "pkg:rpm/glibc@2.38-101.oe2403sp3?arch=aarch64&epoch=0&upstream=glibc-2.38-101.oe2403sp3.src.rpm",
          "referenceType": "purl"
        }
      ],
      "filesAnalyzed": false,
      "homepage": "http://www.gnu.org/software/glibc/",
      "licenseDeclared": "LGPLv2+ and LGPLv2+ with exceptions and GPLv2+ and GPLv2+ with exceptions and BSD and Inner-Net-2.0 and ISC and Public Domain and GFDL-1.3-only",
      "sourceInfo": "acquired package info from repodata DB: repodata/ad2eaa73c52e977400394b41f9a1cb471a8e228cfc085843d3ae74b685a9f2de-primary.sqlite.bz2",
      "summary": "The GNU libc libraries",
      "supplier": "Organization: http://openeuler.org",
      "versionInfo": "0:2.38-101.oe2403sp3"
    }
  ],
  "relationships": [
    {
      "spdxElementId": "SPDXRef-rpm-git-lfs-3.6.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-git-core-2.43.0"
    },
    {
      "spdxElementId": "SPDXRef-rpm-git-lfs-3.6.1",
      "relationshipType": "DEPENDS_ON",
      "relatedSpdxElement": "SPDXRef-rpm-glibc-2.38"
    }
  ]
}